Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: 8lskMmI3hiQPw6BVPefD2snwpt9KAemTEvA712YYYbQ=
Subject key identifier: 5F:DF:D8:D0:58:54:D9:A0:2F:9C:97:42:00:EB:60:BD:63:58:B5:69
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 0196B333CA4EF6C421A1B5249774FEF0CEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 07EB
Signing time: Fri 09 May 2025 04:00:37 +0000
Manifest this update: Fri 09 May 2025 04:00:37 +0000
Manifest next update: Sat 10 May 2025 04:00:37 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: bEBcNyLlLgqA19po0LxMaj4y1WuSgG8aB2Vo6s46wgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:ca:4e:f6:c4:21:a1:b5:24:97:74:fe:f0:ce:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: May 9 04:00:37 2025 GMT
Not After : May 10 04:00:37 2025 GMT
Subject: CN=5fdfd8d05854d9a02f9c974200eb60bd6358b569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:36:9f:2f:e9:4d:28:e6:25:47:6d:73:c9:
e9:3c:17:f3:26:02:15:ab:0c:57:4f:74:c6:b8:35:
7c:e7:ef:b5:d4:8b:91:c0:85:55:58:fd:c7:8f:58:
dd:fa:94:11:bf:6a:30:0c:4c:ff:a9:fc:a6:98:5c:
86:9c:0a:f2:b8:d4:0a:da:c0:a5:a9:62:ea:ea:ea:
2c:a1:5c:0e:b1:1f:b1:2f:80:e6:09:1b:ec:83:00:
0d:d6:a4:0c:ce:d8:58:f1:9e:8e:2c:dc:ba:c9:ef:
cf:c3:98:ee:12:36:ab:2d:6d:82:57:76:f2:3f:9c:
d6:49:e0:db:ac:ed:c1:62:6c:3a:3c:95:f6:6d:e8:
2e:e8:49:fe:66:02:7d:bc:83:e9:80:a4:49:2f:86:
8b:fd:07:47:88:0b:86:cd:54:22:72:b7:37:da:e7:
1d:a1:78:68:94:5e:f8:c4:44:ec:9a:c2:a7:51:f8:
c6:1f:c0:e7:ad:93:fe:42:93:5d:39:42:fa:d2:ed:
8f:62:30:ab:99:c4:4f:e2:02:e3:bd:69:d3:6e:08:
ad:eb:98:f9:26:68:58:d8:79:39:77:b8:ed:ed:79:
4f:fb:c3:68:31:79:33:7a:a1:61:86:e0:19:8f:44:
76:34:9b:2a:ad:b0:5b:b6:0c:7a:34:75:cc:91:b8:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:D8:D0:58:54:D9:A0:2F:9C:97:42:00:EB:60:BD:63:58:B5:69
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2f:a7:eb:16:34:01:a8:0e:b9:27:dd:78:1b:66:10:ac:27:
72:eb:e9:d2:da:61:fa:52:84:8f:50:82:8d:00:35:67:3a:34:
53:5b:53:a9:a7:84:90:7f:08:59:44:57:1f:60:e9:be:28:cc:
25:51:f5:f5:91:ed:d0:ed:2c:ba:65:bc:ce:c1:48:87:eb:f3:
39:c4:5d:8e:6c:0e:7b:ce:6e:4a:b1:d9:50:4b:1c:c0:40:0e:
ae:13:3b:da:d7:bd:c2:60:3c:81:31:b9:a9:dc:12:3d:bc:86:
13:2d:69:d8:8c:12:00:5c:e0:78:4e:c6:98:9e:8d:ed:82:50:
fc:75:59:9a:70:09:2f:97:d5:99:48:a3:76:b5:98:58:56:84:
cf:64:a0:92:4f:5a:db:d9:d3:5c:62:91:d5:11:e7:55:fd:20:
fe:be:fd:9b:86:9b:56:8d:5a:00:ff:c6:96:f5:f3:74:e3:ca:
30:43:91:53:47:24:aa:94:d2:13:9c:a0:48:46:fd:2d:fe:35:
34:59:62:4f:eb:da:52:06:5f:82:9a:1f:04:5f:01:45:0b:29:
ed:25:b9:4f:70:8d:75:bd:48:57:bf:cc:8e:30:f7:08:5f:cb:
e7:3c:6e:20:cc:c0:59:f1:e9:33:9b:e5:26:f5:98:7e:83:22:
d4:bb:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:00:29 2025 by rpki-client